Privacy Policy

This policy explains what personal information IRA Design Studio collects through iradesignstudio.com, why we collect it, who we share it with, and the choices you have. We have written it in plain language rather than legal boilerplate, and we have kept it specific to what this website actually does.

Who we are

IRA Design Studio is a design studio based in Dubai, United Arab Emirates. We are the controller of the personal information described in this policy.

• Email: Connect@iradesignstudio.com
• Phone: +971 50 496 9068
• Registered address: XXXXXX

For any question about this policy, or to make a request about your information, email us at the address above and write “Privacy” in the subject line.

What we collect

1. Information you send us

If you use an enquiry form on this site, or contact us by email, phone or WhatsApp, we receive:

• Your name and email address
• Your company name, if you give it
• The type of project and the budget range you select, if you give them
• The message you write, and anything you choose to include in it
• Our replies, and the rest of the correspondence that follows

Only name, email and message are required. Company and budget are optional, and the forms work without them. Please do not send confidential or sensitive information through a web form.

2. Information collected automatically

We use Google Analytics 4, deployed through Google Tag Manager, to understand how the site is used. It records:

• Pages viewed, time on page, and how far you scroll
• The site or search that referred you
• Your device type, browser and operating system
• An approximate location — usually city level — derived from your IP address
• Clicks on outbound links, file downloads, and clicks on our email, phone and WhatsApp links
• A randomly generated identifier that lets us tell one visit from another

We do not use this data to identify you personally, we do not combine it with anything you send us directly, and we do not use it for advertising. Google Signals and advertising personalisation are switched off on our property, and our configuration does not scan pages for email addresses or phone numbers.

3. Server logs and spam prevention

Our hosting provider keeps standard web server logs, which record your IP address, the time of the request, the page requested and your browser identifier. These are used for security and diagnosing faults.

To stop automated abuse of the enquiry forms we count recent submissions per visitor. Your IP address is not stored for this; it is converted into an irreversible cryptographic hash, kept for up to one hour, and then discarded.

What we do not collect

• Payment or card details — this site takes no payments
• Passwords or accounts — this site has no login or registration
• Special category data such as health, religion, ethnicity or biometrics
• Information from children — this site is not directed at anyone under 18

Why we use it, and on what basis

• To answer your enquiry and discuss possible work. Without your contact details we cannot reply. This is necessary to take steps at your request before entering a contract.
• To run and improve the site. Analytics tell us which work people look at and where they lose interest. Our legitimate interest in operating a useful website.
• To keep the site secure. Logs and rate limiting protect against abuse. Our legitimate interest in security.
• To meet legal obligations, where the law requires us to keep or produce records.

We do not send marketing emails from this website, and we do not add enquirers to any mailing list. If that ever changes we will ask for your consent first.

Cookies

Cookies are small files a website stores on your device. This site sets the following:

We set no advertising, retargeting or social media cookies. The enquiry forms do not create a session cookie of their own.

You can refuse or delete cookies in your browser settings, and the site will still work. To opt out of Google Analytics across every website, install the Google Analytics Opt-out Browser Add-on.

Some pages load fonts, stylesheets and scripts from Google Fonts, jsDelivr and Cloudflare. Serving those files means those providers receive your IP address and browser identifier, as happens with any resource loaded from another domain.

Who we share it with

We do not sell, rent or trade personal information. We share it only with:

• Google — Analytics and Tag Manager, which process site usage data on our behalf. See the Google Privacy Policy.
• Our hosting and email provider, which stores the website, the server logs and the mailbox your enquiry arrives in.
• WhatsApp and Meta, if you choose to message us through the WhatsApp button. That conversation is governed by WhatsApp's own privacy policy, not this one.
• Professional advisers or authorities, where we are legally required to disclose information, or need to establish or defend a legal claim.

Google processes data on servers outside the United Arab Emirates, including in the United States. Where information leaves the UAE, we rely on the safeguards those providers put in place, including standard contractual clauses.

How long we keep it

• Enquiries and correspondence — for as long as needed to deal with your enquiry, and then for up to 24 months in case you come back to us. Longer if a project begins and records must be kept for accounting or legal reasons.
• Analytics data — for the retention period set on our Google Analytics property, which is no more than 14 months. Aggregated reports, which cannot identify you, may be kept longer.
• Server logs — for the period set by our hosting provider, typically a few weeks.
• Spam prevention hashes — one hour.

Your rights

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), and under the GDPR if you are in the European Economic Area or the United Kingdom, you can ask us to:

• Give you a copy of the personal information we hold about you
• Correct anything inaccurate or incomplete
• Delete it, where we have no continuing reason to keep it
• Restrict or object to how we use it
• Provide it in a portable, machine-readable format
• Withdraw consent, where we relied on consent

Email Connect@iradesignstudio.com and we will respond within 30 days. We may need to confirm your identity first. Exercising these rights is free, and we will not treat you differently for doing so.

If you are unhappy with how we have handled your information, you can complain to the UAE Data Office. If you are in the EEA or UK, you can complain to your national data protection authority instead.

How we protect it

The site is served over HTTPS with HTTP Strict Transport Security, so traffic between your browser and our server is encrypted. Enquiry forms validate input on the server, and the files holding our configuration are blocked from public access. Access to enquiry emails is limited to people at the studio who need it. No system is completely secure, and we cannot guarantee absolute security, but we take these measures seriously and review them.

Links to other sites

This site links to Instagram, LinkedIn and WhatsApp, and our work pages may link to clients. We are not responsible for the privacy practices of those sites, and we encourage you to read their policies.

Changes to this policy

We review this policy when the site changes or the law does. The date at the top shows when it was last revised. Any new version is published on this page, and if a change materially affects how we use your information we will make that clear here.

Last updated 14 October 2026. Questions? Email Connect@iradesignstudio.com.